Skip to content

Vulnerabilities & Exploits

CVEs, zero-days, exploit chains and the technical analysis behind them.

Critical CVEs and New Hacking Techniques Weekly Report Cover (05 Oct to 11 Oct 2026)

Weekly Report: New Hacking Techniques and Critical CVEs 05 Oct to 11 Oct 2026

The critical CVEs this week all arrived in one batch: CISA added five vulnerabilities to its Known Exploited Vulnerabilities catalog on 08 October 2026, tied to a Chinese state-linked espionage campaign. One of the five, a CVSS 9.8 path traversal flaw in ONLYOFFICE Document Server, carries unauthenticated remote code execution and is the patch-first priority.… Read More »Weekly Report: New Hacking Techniques and Critical CVEs 05 Oct to 11 Oct 2026

API Penetration Testing in 2026: Why Scanners Miss What Attackers Exploit Cover

API Penetration Testing in 2026: Why Scanners Miss What Attackers Exploit

API penetration testing that stops at scanning misses the flaws attackers actually exploit: broken authorization, forgotten endpoints, and chained attack paths. Here is what makes APIs exploitable, why traditional testing misses it, and how agentic AI pentesting finds and proves it. By FireCompass Security Team | Updated September 2026 | 10 min read #1 On… Read More »API Penetration Testing in 2026: Why Scanners Miss What Attackers Exploit

Critical CVEs and New Hacking Techniques Weekly Report Cover (21 Sep to 27 Sep 2026)

Weekly Report: New Hacking Techniques and Critical CVEs 21 Sep to 27 Sep 2026

CISA added at least 11 vulnerabilities to its Known Exploited Vulnerabilities catalog between 21 and 27 September 2026, five of them carrying a CVSS score of 9.0 or higher, and all eleven confirmed under active exploitation at the time of addition. At least three of the week’s flaws had public proof-of-concept detail circulating before vendors… Read More »Weekly Report: New Hacking Techniques and Critical CVEs 21 Sep to 27 Sep 2026

Weekly Cybersecurity Intelligence Report Cover 21 Sep to 27 Sep 2026

Weekly Cybersecurity Intelligence Report: Cyber Threats and Breaches 21 Sep to 27 Sep 2026

The week of 21 to 27 September 2026 was defined by attackers monetizing access faster than victims could detect it. Bitget lost 351.6 million dollars to a suspected North Korean crew that spoofed its own wallet approvals, ShinyHunters claimed a breach of FBI job applicant data through an unpatched Oracle PeopleSoft zero-day, Gyazo confirmed 23.6… Read More »Weekly Cybersecurity Intelligence Report: Cyber Threats and Breaches 21 Sep to 27 Sep 2026

Critical CVEs and New Hacking Techniques Weekly Report Cover (07 Sep to 13 Sep 2026)

Weekly Report: New Hacking Techniques and Critical CVEs 07 Sep to 13 Sep 2026

CISA added 14 vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog across 11 vendors between 07 and 13 September 2026, 8 of them rated CVSS 9.0 or above, and public proof-of-concept code is already published for at least 5, including two flaws disclosed and exploited in the same week. Patch Adobe Commerce and Magento first:… Read More »Weekly Report: New Hacking Techniques and Critical CVEs 07 Sep to 13 Sep 2026

Use Cases
Technology
About
Partner
Resources

FireCompass – An EC Council Ecosystem Company.
©2025 . All Rights Reserved.

Firecompass ranked #1 AI on HackerOne. Read more →